5501 matches found
Google Patches More Trouble in Mediaserver
Google has re-branded its monthly patch release, bringing a new name and new scope to the newly renamed Android Security Bulletin. While that may be new, the content is definitely familiar. Once again, critical remote code execution Mediaserver vulnerabilities dominate this month’s patches...
The vulnerability of the microprogramming software of the Medialink MWN-WARP300N router allows a hacker to enhance their privileges.
The vulnerability of the web-management interface of the Medialink MWN-WARP300N router software relates to the use of default passwords for user accounts. Exploiting this vulnerability could allow an attacker to gain increased privileges by utilizing Wi-Fi sessions...
CVE-2016-2422
Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...
Code injection
Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...
CVE-2016-2422
Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...
CVE-2016-2422
CVE-2016-2422 describes an Android Wi‑Fi elevation vulnerability where a Wi‑Fi CA certificate could be used in an unrelated CA role, enabling privilege escalation via a crafted app to gain Signature or SignatureOrSystem privileges. Affected: Android 4.x up to 4.4.3; 5.0.x up to 5.0.1; 5.1.x up to...
CVE-2016-2422
Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...
Android Wi-Fi elevation of privilege vulnerability (CNVD-2016-02038)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Wi-Fi as one of the wireless connectivity components. An elevation of privilege vulnerability exists in Android's Wi-Fi. A local attacker could exploit this vulnerability to...
[SECURITY] Fedora 23 Update: NetworkManager-1.0.12-1.fc23
NetworkManager is a system service that manages network interfaces and connections based on user or automatic configuration. It supports Ethernet, Bridge, Bond, VLAN, Team, InfiniBand, Wi-Fi, mobile broadband WWAN, PPPoE and other devices, and supports a variety of different VPN services...
SongPal:Bluetooth/Wi-Fi remote - Customized SSL, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application SongPal:Bluetooth/Wi-Fi remote published at the 'play' market has multiple vulnerabilities...
Tivizen DVB-T Wi-Fi - Exported components, Native code usage, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Tivizen DVB-T Wi-Fi published at the 'play' market has multiple vulnerabilities...
Vodafone Secure Net Wi-Fi - External URLs, Native code usage, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Vodafone Secure Net Wi-Fi published at the 'play' market has multiple vulnerabilities...
Vodafone Mobile Wi-Fi Monitor - Apache license, External URLs, WebView JavaScript enabled vulnerabilities
HackApp vulnerability scanner discovered that application Vodafone Mobile Wi-Fi Monitor published at the 'play' market has multiple vulnerabilities...
Portable Wi-Fi hotspot - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Portable Wi-Fi hotspot published at the 'play' market has multiple vulnerabilities...
فك كلمة سر الواي فاي - External URLs, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application فك كلمة سر الواي فاي published at the 'play' market has multiple vulnerabilities...
Universal Remote Wi-Fi/IR MyAV - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Universal Remote Wi-Fi/IR MyAV published at the 'play' market has multiple vulnerabilities...
Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.4. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppleRAID - AppleUSBNetworking - Bluetooth - Carbon - dyld - FontParser - HTTPProtocol - Intel Graphics Driver -...
D-Link DWR-932 Firmware 4.00 - Authentication Bypass
Exploit for hardware platform in category web applications D-Link DWR-932 Firmware = V4.00 Authentication Bypass - Password Disclosure Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: D-Link DWR-932 Tested Version: Firmware V4.00EUb03 Vendor: D-Link http://www.dlink.com/ Product UR...
D-Link DWR-932 Firmware 4.00 - Authentication Bypass
D-Link DWR-932 Firmware 4.00 - Authentication Bypass D-Link DWR-932 Firmware = V4.00 Authentication Bypass - Password Disclosure Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: D-Link DWR-932 Tested Version: Firmware V4.00EUb03 Vendor: D-Link http://www.dlink.com/ Product URL:...
D-Link DWR-932 Authentication Bypass / Password Disclosure
D-Link DWR-932 Firmware = V4.00 Authentication Bypass - Password Disclosure Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: D-Link DWR-932 Tested Version: Firmware V4.00EUb03 Vendor: D-Link http://www.dlink.com/ Product URL:...